Lucene search
K

25 matches found

RedhatCVE
RedhatCVE
added 2026/01/23 9:16 p.m.2 views

CVE-2025-68020

Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notifier: from n/a through = 2.7.13...

6.5CVSS5.9AI score0.00021EPSS
Exploits0References1
NVD
NVD
added 2026/01/22 5:16 p.m.1 views

CVE-2025-68020

Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notifier: from n/a through = 2.7.13...

6.5CVSS0.00021EPSS
Exploits0References1
ATTACKERKB
ATTACKERKB
added 2026/01/22 4:52 p.m.0 views

CVE-2025-68020

Missing Authorization vulnerability in WANotifier WANotifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects WANotifier: from n/a through = 2.7.12...

6.5CVSS5.3AI score0.00021EPSS
Exploits0References2
CVE
CVE
added 2026/01/22 4:52 p.m.2 views

CVE-2025-68020

CVE-2025-68020 affects the WANotifier WordPress plugin (versions through 2.7.12). The vulnerability is a Missing Authorization (Broken Access Control) issue in the notifier functionality, due to incorrectly configured access control security levels. This could allow an attacker to exploit the wea...

6.5CVSS5.9AI score0.00021EPSS
Exploits0References1
Cvelist
Cvelist
added 2026/01/22 4:52 p.m.16 views

CVE-2025-68020 WordPress Notifier plugin <= 2.7.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notifier: from n/a through = 2.7.13...

6.5CVSS0.00021EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2026/01/22 4:52 p.m.1 views

CVE-2025-68020 WordPress Notifier plugin <= 2.7.13 - Broken Access Control vulnerability

Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notifier: from n/a through = 2.7.13...

6.5CVSS5.1AI score0.00021EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2026/01/22 12:0 a.m.1 views

PT-2026-4063

Name of the Vulnerable Software and Affected Versions WANotifier versions through 2.7.12 Description A missing authorization issue exists in WANotifier’s notifier functionality. This allows exploitation due to incorrectly configured access control security levels. Recommendations Update WANotifie...

5.2AI score0.00021EPSS
Exploits0References3
Patchstack
Patchstack
added 2026/01/20 11:25 a.m.4 views

WordPress Notifier plugin <= 2.7.13 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Legion Hunter in WordPress Plugin Notifier versions = 2.7.13...

6.5CVSS5.4AI score0.00021EPSS
Exploits0Affected Software1
EUVD
EUVD
added 2025/10/03 8:7 p.m.2 views

EUVD-2025-18944

Malicious code in bioql PyPI...

4.3CVSS6.5AI score0.00168EPSS
Exploits0References1
RedhatCVE
RedhatCVE
added 2025/06/23 8:40 a.m.2 views

CVE-2025-49976

Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notifier: from n/a through = 2.7.12...

4.3CVSS5.9AI score0.00168EPSS
Exploits0References1
NVD
NVD
added 2025/06/20 3:15 p.m.2 views

CVE-2025-49976

Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notifier: from n/a through = 2.7.12...

4.3CVSS0.00168EPSS
Exploits0References1
Vulnrichment
Vulnrichment
added 2025/06/20 3:4 p.m.2 views

CVE-2025-49976 WordPress WANotifier plugin <= 2.7.7 - Broken Access Control Vulnerability

Missing Authorization vulnerability in WANotifier WANotifier allows Exploiting Incorrectly Configured Access Control Security Levels. This issue affects WANotifier: from n/a through 2.7.7...

4.3CVSS4.6AI score0.00168EPSS
Exploits0References1
CVE
CVE
added 2025/06/20 3:4 p.m.10 views

CVE-2025-49976

CVE-2025-49976 concerns the WANotifier WordPress plugin (versions

4.3CVSS5.9AI score0.00168EPSS
Exploits0References1
Cvelist
Cvelist
added 2025/06/20 3:4 p.m.9 views

CVE-2025-49976 WordPress WANotifier plugin <= 2.7.12 - Broken Access Control vulnerability

Missing Authorization vulnerability in WANotifier Notifier notifier allows Exploiting Incorrectly Configured Access Control Security Levels.This issue affects Notifier: from n/a through = 2.7.12...

4.3CVSS0.00168EPSS
Exploits0References1
CNNVD
CNNVD
added 2025/06/20 12:0 a.m.1 views

WordPress plugin WANotifier 安全漏洞

WordPress and WordPress plugin are both products of the WordPress Foundation.WordPress is a set of blogging platforms developed using the PHP language. The platform supports setting up personal blog sites on servers with PHP and MySQL.WordPress plugin is an application plugin. A security...

4.3CVSS6.5AI score0.00168EPSS
Exploits0References1
Positive Technologies
Positive Technologies
added 2025/06/20 12:0 a.m.1 views

PT-2025-26344 · Unknown · Wanotifier

Name of the Vulnerable Software and Affected Versions: WANotifier versions through 2.7.7 Description: The issue is related to a Missing Authorization vulnerability in WANotifier, allowing the exploitation of incorrectly configured access control security levels. Recommendations: For versions...

4.3CVSS6AI score0.00168EPSS
Exploits0References4
Patchstack
Patchstack
added 2025/06/19 4:35 p.m.5 views

WordPress WANotifier plugin <= 2.7.12 - Broken Access Control vulnerability

Broken Access Control vulnerability discovered by Nguyen Tran Tuan Dung domiee13 in WordPress Plugin Notifier versions = 2.7.12...

4.3CVSS5.2AI score0.00168EPSS
Exploits0Affected Software1
Patchstack
Patchstack
added 2024/07/31 6:37 a.m.1 views

WordPress WANotifier plugin < 2.6.1 - Admin+ Stored XSS vulnerability

Admin+ Stored XSS vulnerability discovered by Bob Matyas in WordPress Plugin Notifier versions 2.6.1...

4.8CVSS5.2AI score0.00204EPSS
Exploits1References1Affected Software1
OSV
OSV
added 2024/07/31 6:15 a.m.1 views

CVE-2024-6165

The WANotifier WordPress plugin before 2.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS5.8AI score0.00204EPSS
Exploits1References1
NVD
NVD
added 2024/07/31 6:15 a.m.8 views

CVE-2024-6165

The WANotifier WordPress plugin before 2.6.1 does not sanitise and escape some of its settings, which could allow high privilege users such as admin to perform Stored Cross-Site Scripting attacks even when the unfilteredhtml capability is disallowed for example in multisite setup...

4.8CVSS0.00204EPSS
Exploits1References1
Rows per page
Query Builder